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Abstract — In fl^ the authors Introduced a lattice Invariant 
called "Secrecy Gain" which measures the confusion experienced 
by a passive eavesdropper on the Gaussian Wiretap Channel. We 
study, here, the behavior of this Invariant for unimodular lattices 
by using tools from Modular Forms and show that, for some 
families of unimodular lattices. Indexed by the dimension, the 
secrecy gain exponentially goes to Inflnity with the dimension. 

I. Introduction 

The wiretap channel was introduced by Wyner ||2] as 
a discrete memoryless broadcast channel where the sender, 
Alice, transmits confidential messages to a legal receiver 
Bob, in the presence of an eavesdropper Eve. Wyner de- 
fined the perfect secrecy capacity as the maximum amount 
of information that Alice can send to Bob while insuring 
that Eve gets a negligeable amount of information. He also 
described a generic coding strategy known as coset coding. 
While coset coding has been used in many coding scenarios 
(for ex. O, lIU), Wyner used it to encode both data and 
random bits to confuse the eavesdropper The question of 
determining the secrecy capacity of many classes of channels 
has been addressed extensively recently, yielding a plethora of 
information theoretical results on secrecy capacity. 

There is a sharp contrast with the situation of wiretap 
code designs, where very little is known. The most exploited 
approach to get practical codes so far has been to use LDPC 
codes (for example [5| for binary erasure and symmetric 
channels, ||6l for Gaussian channels with binary inputs). We 
also note that wiretap II codes have been extended to more 
general settings such as network coding in |7|. Finally, lattice 
codes for Gaussian channels have been considered from an 
information theoretical point of view in fE\. 

In [IJ, a design criterion for constructing explicit lattice 
codes, has been proposed, based on the analysis of Eve's cor- 
rect decision probability. This design criterion relies on a new 
lattice invariant called "secrecy gain" based on theta series. In 
this paper, we analyze the secrecy gain for unimodular lattices. 

The paper is organized as follows. In Section Hill we recall 
the definition of the secrecy gain and give its value for some 
extremal even unimodular lattices. An asymptotic analysis is 
then performed in section |IV] for even unimodular lattices and 
we prove that the secrecy gains of some of these lattices grow 
up to infinity with the dimension. Finally we come back to the 
Gaussian wiretap channel in section[V]to show that unimodular 



lattices only define one operating point for the system. Some 
other types of lattices should be studied in the future for other 
operating points. 

II. Notations and previous results 

A. Notations and system model 

We use, in this paper, the same system model and the same 
notations as [1]. In [l], the secrecy gain has been defined 
and some examples have been given. Here we analyze more 
deeply this parameter for even unimodular lattices and give the 
asymptotic behavior of this secrecy gain when the dimension 
of the lattices grows to infinity. Figure [T] gives the model 
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Figure 1. The Gaussian Wiretap Channel 

considered in this paper where Alice wants to send data to 
Bob on a Gaussian channel whose noise variance is given by 
(j^. Eve is the eavesdropper trying to intercept data through 
another Gaussian channel whose noise variance is Ug. In 
order to have a positive secrecy capacity, we will assume that 
al > (7^. Bits are transmitted by Alice at a rate equal to 
R ~ Rs + Rr where Rs is the secrecy rate of this transmission 
and Rr is the rate of pseudo-random bits. Indeed, we use 
Wyner's generic coding strategy |9|. We give the remaining 
parameters, 

• Ab is the fine lattice (used to minimize Bob's probability 
of error) 

• Ag is the coarse lattice (used to minimize Eve's proba- 
bility of correct decision) 

• n is the dimension of both lattices 



• V (Ab) (resp. V (Ag)) is the fundamental parallelotope of 
Afc (resp. Ae) 

• Vol (V) is the volume of V 

Data bits label cosets in Ab/Ae while pseudo-random bits 
label points of Ag. The reader can refer to |1| for a more 
detailed description of the coding scheme. Still according to 
lH], and under the assumption of a moderate to high secrecy 
rate, the expression of the probability of correct decision at 
the eavesdropper can be expressed as 

P,., ~ I -^^- 1 Vol (V (Ab)) ^ e ^^. (1) 
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In eq. ([TJ, we recognize the theta series of lattice Ag. 
B. Theta series of a lattice 

Definition 1: Let A be a Euclidean lattice, then the theta 
series of A is ifTOl 



eA(z) = Y, ?""'"', 9 = e*'^^Im(z) > 
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Some exceptional lattices have theta series that can be 
expressed as functions of the Jacobi theta functions 'di{q), 
i = 2,3,4 with 
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For instance, table U gives the theta series of some excep- 
tional lattices. 



Lattice A 


Theta series ©a 


Cubic lattice Z" 


n 


D„ 


Hn+n) 


Gosset lattice _Eg 


h(^l + n + K) 



Table I 
Theta series of some lattices 



C. Minimization of the theta series 

One problem that arises naturally when studying theta series 
is the following. In eq. ([T]l, set y = iz and restrict to real values 
of y. We are now interested in studying 



0A(y) = E'?" 

xeA 



,q = e-^y,y>0. 



Equation 0), giving Eve's probability of correct decision, can 
be written as 
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So, for a given dimension n, the problem to solve is to find 
a lattice A°p* that minimizes 0a(2/) for a given value of y in 
order to minimize expression (O. 



III. The secrecy gain 

A. Definitions 

We recall here some definitions given in |T|. 

We remark that, if we do not use any specific coarse lattice 
Ae, we can assume that A^ is equal to a scaled version of 
Z" with same volume as A^. Consequently, for a lattice A, 
it is natural to define the secrecy function. For a lattice with 
unitary volume, we have 

Definition 2: Let A be an n— dimensional lattice with uni- 
tary volume. The secrecy function of A is 

^^^y^ QAiy) OAiy) 

defined for y > 0. 

Then of course, as we want to minimize the expression 
of Eve's probability of correct decision in eq. (O, we are 
interested in the maximum value of the secrecy function. So, 
we define the secrecy gain. 

Definition 3: The secrecy gain of an n— dimensional lattice 

A is 

XA = supEA{y) 
v>o 

B. The secrecy gain of unimodular lattices 

Theta series are difficult to analyze. Nevertheless, for some 
lattices, these functions have nice properties. It is the case of 
even unimodular lattices whose theta series are modular forms 
with integer weight. We mainly restrict this paper to the study 
of even unimodular lattices and will use tools from modular 
forms. 

1} Definitions and formulas: We recall the definition of an 
integral lattice ifTOl . 

Definition 4: A lattice A is integral if its Gram matrix has 
entries in Z. Note that an integral lattice has the property 

1 
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Vol (V (A))-^ 

From this definition, we can now define unimodular lattices. 
Definition 5: A lattice A is unimodular if 

1) A is integral 

2) A is equal to its dual 

Note that a unimodular lattice has fundamental volume equal 
to 1. 

Let A* be the dual lattice of the n— dimensional lattice A. 
Then Jacobi's formula fTOl gives the theta series of A* as a 
function of the theta series of A, 



eA.(2/) = Vol(V(A))y-te^(i 
If A is unimodular, then using (HI, we deduce 



(4) 



eA(2/)-eA.(2/) = y-^eA - 

So, since Z" itself is unimodular, the secrecy function of A 
has the property, 

1 



5a(2/) = ^a - 



If we express y in decibel (in our case, y 



and is We deduce, then, the secrecy gain of A24, 



related to Eve's signal to noise ratio), then the secrecy function 
becomes an even function. 

Conjecture 1: The secrecy gain of unimodular lattices is 
achieved by the secrecy function at j/ = 1. 
Using conjecture [T] in what follows, we can evaluate the 
secrecy gain of unimodular lattices as 

XA = Sa(1) 

Some formulas: Some formulas are useful to calculate 
the secrecy gain of unimodular lattices. The most important 
ones, found in ifTTl . are 






^4 (e-") 
^i?4 (e-") 



(5) 



2) Secrecy gain of some exceptional unimodular lattices: 
a) Gosset Lattice E^: E^ is unimodular even. From table 
Eland eq. (|5]l, we get 



1 



\{d2{e--f +§:i{e--f + di{e--f) 



Sbs(1) 



Me—f 



1 1 

1 + 7 + 7 
4 4 



We deduce, then, the secrecy gain of E^, 



XEs 



SBe(l) 



= 1.33333 



As an illustration, figure |2] gives the secrecy function of £'§ 
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Figure 2. Secrecy function of Eg, 

b) Leech Lattice A24." A24 is also unimodular even. From 
table HI we get (with simplified notations) 

1 _ \{^i+n+^if-'mn^i 



5a.. (1) 



n' 



27 45 

26 ~ 28 
63 

256 



256 
XA34=5A.4(l) = -g3-= 4.0635 



As an illustration, figure[3]gives the secrecy function of A24. 
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Figure 3. Secrecy function of A24 

C. Higher dimension unimodular extremal lattices 

Eg and A24 are extremal even unimodular lattices in di- 
mensions 8 and 24 respectively [jLQJ. Extremal means that 
their minimum distance is maximal for a given dimension 
ifTOl . We can give same type of results for extremal even 
unimodular lattices of higher dimensions. For instance, we 
can derive the secrecy functions and secrecy gains of extremal 
even unimodular lattices in dimensions 32, 48, and 72 using 
derivations of |12|. The same can be done in dimension 80 
by solving a linear system jTJl . Please note that, until now, 
nobody knows if an extremal lattice in dimension 72 exists. 
Results are summarized in table [III Here we introduce the 



Dimension 


Lattice A 


Qa 


8 


Es 


E4 


24 


A24 


El - 720A 


32 


BW32 


El - 96OS4A 


48 


P48 


El - 1440S|A + 125280A^ 


72 


L72 


El - 2160^2^ + 965520SI A^ - 27302400A'^ 


80 


Lgo 


Bi" - 2400£'i A + 1360800£;|A'^ - 103488000£'4A'^ 



Table II 
Theta series of extremal lattices 



function 



A(g) 



El{q)~El{q) 
123 



where Ek are the Eisenstein series WS\ defined as 

n +00 



Ek{q)^l + 



C(i-fc) 



771—1 



,fc-i 1 



1-q" 



(6) 



2fc ■r^ i._n q 

1 - ^^ 2^ TO 



Bk 



m— 1 



l-q" 



where Bk are the Bernouilli numbers lfT4ll and C,{s) is the 
Riemann zeta function 



00 .. 



fc=l 



Relations with Jacobi functions are (in symbolic notation) 

and give rise to the expressions of theta series evaluated 
below. 

1) Barnes Wall lattice BW32- In dimension 32, Barnes- 
WaU lattice BW32 is an extremal lattice. We have 



e 



BW3: 



so, 



^BW32 



(1) 



re(^'+^t+^') 


'{^ 


-30 • ^^ ^^ ^i 


r.H) 


\H 


9 


64' 







{^l + 4 + ^l 



30- 



16 



Hence, 



XBW32 



64 
"9 



= — ~7.11 



2) Lattice P4Sp(q)- There are two different extremal even 
unimodular lattices in dimension 48, P^sp and P485 IfTOl Chap. 
5], having, of course the same theta series. 



2048 ^ 2 3 4 

+32 {§1 +^l+ ^l] 



<) 



1 



givmg 

1 

Sp,,(l) "2048 
19467 



3915 1440 



256 



524288 



Hence, 



XP4. 



16 



524288 



1 

^+2 



26.93 



32 



-^ 



19467 

3) Dimensions 72 and 80.- In the same way, from table |II1 
we can compute the secrecy gain for an extremal unimodular 
even lattice in dimension 72 and 80. Note that two examples 
of such lattices in dimension 80 have been given in ifTSl . We 
have 

134217728 



XA7 



XAg 



685881 
536870912 

1414413 



195.69 



379.57 



1 Dimension 


8 


24 


32 


48 


72 


80 1 


1 Secrecy gain 


1.3 


4.1 


7.11 


26.9 


195.7 


380 1 



Table III 
Secrecy gains of extremal lattices 



Table |III] summarizes all these results. 



IV. Asymptotic Analysis 

We propose, here to find a lower bound of the best secrecy 
gain as a function of the dimension n , and deduce some 
asymptotic results (when n is large enough). For a fixed 
dimension n, we compute bounds on the theta series of an 
optimal unimodular lattice. By optimal, we mean a lattice 
which maximizes the secrecy gain. We will use the Siegel- 
Weil formula to compute these bounds. 

A. A Siegel-Weil formula for theta series of even unimodular 
lattices 

Let n = (mod 8), J7„ be the set of all inequivalent even 
unimodular n— dimensional lattices. Let k — "/2. Then, one 
has Ell 



Aen, 



|Aut(A)| 



where 



M„ 



E 

Aea„ 



1 



|Aut(A)| 



and Ek{q) is the Eisenstein series with weight k even whose 
expression is given in eq. (|6|. 
Let e^"i|j = minAeo„ Oa. Then 

Oa 






giving rise to 



Define 



then we get. 



Aeo,, 



«(") 
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<Ek. 



— MnEk 



maxxA 
Agn„ 






Xn > 



^3 je-n 
Ek (e-2-) 



B. Limit of Ek 

Assume g to be a real number < g < 1. We have 



Ekiq) = 1 
Replacing q by e"^'^ gives 



2fc 
Bk 



+00 

E' 

m— 1 



-k-l 



q" 



l-g" 



Ekie 



^27r\ 



1 + 



2fc 



+00 



,fc-l 



1 



which converges (very quickly) to 2 when fc is a multiple of 
4 that tends to infinity. Moreover, according to lH!], we have 



^3 {e-^) 



r(!) 



1.086 > 1 



so, 
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Figure 4. Secrecy functions of extremal lattices in dimensions 32, 48, 72 and 80 




Figure 5. Lower bound of the minimal secrecy gain as a function of n from 
Siegel-Weil formula. Points correspond to extremal lattices. 



which tends exponentially to infinity. Figure |5] gives the 
asymptotic expression of the secrecy gain as a function of 
the dimension n, as well as points corresponding to extremal 
lattices in dimensions 8, 16, 24, 32, 48, 72 and 80. 

C. Consequences 

We proved that there exists a family of even unimodular 
lattices whose secrecy gains exponentially grows up with the 
dimension, which means that Eve's probability of correct 
decision exponentially tends to 0. But as we can remark in 
figure m around its maximum, the secrecy function becomes 
sharper and sharper when n grows up, which means that, for 
high dimensions, the communication system absolutely has to 
operate at y — 1. We show now, in section |Vl the meaning of 



this constraint in terms of the communication system as well 
as the way of doing the same with y y^ 1. 

V. Back to the wiretap channel 

We are interested, in this section, in how the secrecy gain 
is related to the parameters of the Gaussian channel, through 
the proposed lattice coset construction. 

A. Operating point 

For unimodular lattices, the secrecy gain is obtained as the 
value of the secrecy function at point y = I- From eq. (O, it 
means 



a„2 = 



1 

2^' 



Conjecture [T] says that the secrecy gain is achieved by the 
secrecy function at y = 1 if the lattice is unimodular If the 
lattice is not unimodular, then the secrecy gain can be achieved 
for another value of y. In figure |6l we see that the secrecy gain 
is achieved for y — —1.5 dB (y = VV2) and not dB (y = I). 
We call operating point, the value j/o.p. for which 

X = S(yo.p.) 

B. Fundamental volume of Ag 

The secrecy function is defined for a fundamental volume of 
Ae equal to 1. We now relate the secrecy function to system pa- 
rameters. Let R be the value of the total rate (information bits 
+ pseudo-random bits) transmitted by Alice, per (complex) 
channel use and Rg be the value of the information (secret) 
rate. 




Figure 6. Secrecy function of tlie checkerboard lattice D4 



We now establish a correspondence between this parameter 
y and the physical parameters of the channel. 
Fundamental volume of Ag is 

Vol(V(Ae)) = 2'^Vol(V(A6)) 

where R^ is the rate at which Alice sends the secret informa- 
tion bits to Bob. The operating point of the system (for instance 
volume equal to 1 for a unimodular lattice) corresponds, of 
course, to a normalized case i/norm- In practice, we should 
work with a scaled lattice. The operating point of this scaled 
lattice is then, 

y = ynormVol(V(Ae))* 

= 2«^y„ormVol(V(Afc))* 

Now, the energy, per channel use, of the signal sent by Alice 
is 

^, = 2^Vol(V(Ab))* 

where R is the global rate of the communication (secret bits 
+ pseudo-random bits). Hence, we get 

V - 2^'v E 2~" - 2-^^-^'^E V 

y — ■^ i/ norm -'^5'=-' — ■^ -*^synorm- 

As ynorm = 2^^ ^^ ^^^ 



(8) 



where 7e is Eve's signal to noise ratio. If we use a unimodular 
lattice, then the operating point is y = 1 which corresponds 
to a secrecy rate 



y = 


2-{R-R^)E, 


2-iR-Rs) 


2TTal 


27r '^ 



Rs^R- log; 



27r 

7e 



(9) 



Other secrecy rates require to study other families of lattices 
such as modular lattices I1I61I, for instance. 



VI. Conclusion 

The secrecy gain introduced in 1 1 1 is a new lattice invariant 
that measures how much confusion the eavesdropper will 
experience. This parameter is based on the value of the 
theta series of lattice Ae at some point that depends on the 
lattice itself. We can analyze how secrecy gain behaves, when 
dimension grows up, if Ag is an even unimodular lattice. In 
that case, its theta series is a modular form with integer weight 
and very efficient tools can be used to analyze its behavior We 
have shown that an even unimodular lattice with minimal theta 
series has a secrecy gain which exponentially goes to infinity 
when dimension n goes to infinity. But this only corresponds 
to values of Eve's SNR equal to 

7e-^2^-^-= + l 

where R is the total bit rate and Rs is the secrecy rate. 
For other values of je, other families of lattices have to be 
considered such as £— modular lattices or their duals. But this 
requires to find another Siegel-Weil formula for these types of 
lattices. 

References 

[1] J.-C. Belfiore and F. Oggier, "Secrecy gain: a wiretap 

lattice code design," ISITA 2010, 2010. [Online]. Available: 

arXiv:1004.4075vl[c.s.IT] 
[2] L. H. Ozarow and A. D. Wyner, "Wire-tap channel II," Bell Syst. Tech. 

Journal, vol. 63, no. 10, pp. 2135-2157, December 1984. 
[3] R. Zamir, S. Shamai, and U. Erez, "Linear/lattice codes for structured 

multi-terminal binning," IEEE Trans. Inf. Theory, June 2002. 
[4] S. Pradhan and K. Ramchandran, "Generalized coset codes for dis- 
tributed biiming," IEEE Trans. Inf. Theory, October 2005. 
[5] A. Thangaraj, S. Dihidar, A. R. Calderbank, S. McLaughlin, and J.-M. 

Merolla, "AppHcations of LDPC codes to the wiretap channel," IEEE 

Trans. Inf. Theory, vol. 53, no. 8, August 2007. 
[6] D.Klinc, J.Ha, S. McLaughlin, J.Barros, and B. Kwak, "LDPC codes for 

the Gaussian wiretap channel," in Proc. Information Tlieory Workshop, 

October 2009. 
[7] S. Y. El Rouayheb and E. Soljanin, "On wiretap networks 11," in 

Proceedings ISIT, 2007. 
[8] X. He and A. Yener, "Providing secrecy with structured codes: Tools 

and applications to two-user Gaussian channels," July 2009. [Online]. 

Available: http://a rxiv.org/pdf/0907.538 8 
[9] A. Wyner, "The wire-tap chaimel," Bell. Syst. Tech. Journal, vol. 54, 

October 1975. 
[10] J. Conway and N. Sloane, Sphere packings, Lattices and Groups, 3rd ed. 

Springer-Verlag, 1998. 
[11] E. Weisstein, "Jacobi Theta Functions," Math World 

- A Wolfram Web Resource. [Online]. Available: 

http ://mathworld. wolfram . com/JacobiThetaFunctions . html 
[12] N.-P. Skoruppa, "Reduction mod I of Theta Series of level £"■." 

[Online]. Available: arXiv:0807.4694v2[math.NT] 
[13] W. Ebehng, Lattices and Codes. Advanced Lectures in Mathematics, 

1994. 
[14] J. -P. Serre, A course in arithmetic, ser Graduate Texts in Mathematics. 

Springer, 1996. 
[15] C. Bachoc and G. Nebe, "Extremal lattices of minimum 8 related to the 

Mathieu group Af22 " Journal fiir die reine und angewandte Mathematik, 

vol. 494, pp. 155-171, 1998. 
[16] H.-G. Quebbemann, "Modular lattices in Euclidean spaces," / Number 

Theory, vol. 54, pp. 190-202, 1995. 



